Hi,

Does Shiro support assigning permissions directly to users ? ( not as roles ).

such as
user1 has permission document:read,write:doc1
user2 has permission document:read,write:doc2

Most examples assign roles to users and permission to roles.

In looking at the implementation of  Subject.isPermitted(String perm)
and JdbcRealm.java, I am thinking this is possible. I can store the
user - permission mapping in table and
I would need to override the implementation of
doGetAuthorizationInfo(Principal collection

Am I right about this ?

thanks

Mj

-- 
http://khangaonkar.blogspot.com/

Reply via email to